www.pdqa.gov.hk

- Hong Kong SAR Government -

Issued by Hongkong Post e-Cert CA 1 - 15

About this certificate

This digital certificate with serial number 1b:70:cd:2a:29:eb:3c:14:b6:f6:6b:19:d9:0c:80:6e:83:da:c7:00 was issued on by Hongkong Post.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Hong Kong SAR Government

Organization: Hong Kong SAR Government
Organization unit: 0001956070
Organization unit: 000000000000000000000000DH-PDQA
Organization unit: Hongkong Post e-Cert (Server)
Organization unit: DH-Professional Development and Quality Assurance
State / Province: Hong Kong
Locality: Hong Kong
Country: HK

Hongkong Post

Organization: Hongkong Post
State / Province: Hong Kong
Locality: Hong Kong
Country: HK

This certificate has expire since

Certificate Details

Serial Number (hex): 1b:70:cd:2a:29:eb:3c:14:b6:f6:6b:19:d9:0c:80:6e:83:da:c7:00
Serial Number (int): 156658306640674274650825786484618854360587880192
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 64:ef:e8:f0:c6:5b:6c:b7:05:9b:f5:fb:79:8a:3b:7e:56:af:80:0e
AuthorityKeyId: 4c:ef:77:ad:23:4a:d6:45:48:28:d7:98:2c:fe:21:1a:65:f4:4a:1d

Fingerprint (sha1): e1:c5:ce:6f:11:75:de:36:11:2d:ec:b2:98:93:fd:95:06:fe:eb:95
Fingerprint (sha256): cb:20:04:12:b2:75:b7:38:21:63:36:0a:80:b8:d5:c8:86:bc:1f:6a:60:c8:90:81:f1:2c:a0:3c:c1:d7:30:29

Issuing Certificate URL: http://www1.hongkongpost.gov.hk/root/ecert_ca_1-15.crt

Revocation information

OCSP Server: http://ocsp1.hongkongpost.gov.hk
CRL Distribution Point: http://crl1.hongkongpost.gov.hk/crl/eCertCA1-15CRL1.crl

Check the revocation status for certificate www.pdqa.gov.hk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pdqa.gov.hk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.pdqa.gov.hk

Other certificates including the domain name pdqa.gov.hk

(limited to 100 certificates)
www.pdqa.gov.hk
www.pdqa.gov.hk
www.pdqa.gov.hk
www.pdqa.gov.hk
www.pdqa.gov.hk
www.pdqa.gov.hk
www.pdqa.gov.hk
www.pdqa.gov.hk

Certificate

The complete raw certificate details for www.pdqa.gov.hk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJWzCCCEOgAwIBAgIUG3DNKinrPBS29msZ2QyAboPaxwAwDQYJKoZIhvcNAQEL
BQAwdjELMAkGA1UEBhMCSEsxEjAQBgNVBAgTCUhvbmcgS29uZzESMBAGA1UEBxMJ
SG9uZyBLb25nMRYwFAYDVQQKEw1Ib25na29uZyBQb3N0MScwJQYDVQQDEx5Ib25n
a29uZyBQb3N0IGUtQ2VydCBDQSAxIC0gMTUwHhcNMTgwNjEzMDIyODIzWhcNMjAw
NjEzMDIyODIzWjCCARUxCzAJBgNVBAYTAkhLMRIwEAYDVQQIEwlIb25nIEtvbmcx
EjAQBgNVBAcTCUhvbmcgS29uZzEhMB8GA1UEChMYSG9uZyBLb25nIFNBUiBHb3Zl
cm5tZW50MRMwEQYDVQQLEwowMDAxOTU2MDcwMSgwJgYDVQQLEx8wMDAwMDAwMDAw
MDAwMDAwMDAwMDAwMDBESC1QRFFBMSYwJAYDVQQLEx1Ib25na29uZyBQb3N0IGUt
Q2VydCAoU2VydmVyKTE6MDgGA1UECxMxREgtUHJvZmVzc2lvbmFsIERldmVsb3Bt
ZW50IGFuZCBRdWFsaXR5IEFzc3VyYW5jZTEYMBYGA1UEAxMPd3d3LnBkcWEuZ292
LmhrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj/HBz9gQ0/aJu/f
vLhcUw3tHUHaNzFiVuyG1kpF6K3r9PvSloDsjSonlYXJBQB+vx4etCo4AdTd0Vn6
Xp3UCg4sWL3NU6KLaOivu/AlSy5zlGYAeP4MsfxBvgxyiPkgKjHkOSokb4oLIiRM
Nt/co/STvPSE3Ybnm/+arLwbb+uxd06t7fwVCNwSySduPhSsTRh7WG4XQqJ3q23t
pdZAZvWEdO1q9YcfKiPfHdcF7RxjFY2Yc/jdMCMcBCfvsMDE0xiWOEesL155pjHj
EYV2Pk4/4SmSWxIHCIHRMLXtd1805XJHM/UflHwmQM4T4Xst+qNt/fJs3tmk8aWK
fRUhVQIDAQABo4IFPjCCBTowbwYDVR0gBGgwZjAzBgorBgEEAf0eAQcBMCUwIwYI
KwYBBQUHAgEWF3d3dy5ob25na29uZ3Bvc3QuZ292LmhrMC8GBmeBDAECAjAlMCMG
CCsGAQUFBwIBFhd3d3cuaG9uZ2tvbmdwb3N0Lmdvdi5oazAaBgNVHREEEzARgg93
d3cucGRxYS5nb3YuaGswCQYDVR0TBAIwADCBgAYIKwYBBQUHAQEEdDByMEIGCCsG
AQUFBzAChjZodHRwOi8vd3d3MS5ob25na29uZ3Bvc3QuZ292LmhrL3Jvb3QvZWNl
cnRfY2FfMS0xNS5jcnQwLAYIKwYBBQUHMAGGIGh0dHA6Ly9vY3NwMS5ob25na29u
Z3Bvc3QuZ292LmhrMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAUTO93rSNK1kVIKNeYLP4hGmX0Sh0wSAYD
VR0fBEEwPzA9oDugOYY3aHR0cDovL2NybDEuaG9uZ2tvbmdwb3N0Lmdvdi5oay9j
cmwvZUNlcnRDQTEtMTVDUkwxLmNybDAdBgNVHQ4EFgQUZO/o8MZbbLcFm/X7eYo7
flavgA4wggNiBgorBgEEAdZ5AgQCBIIDUgSCA04DTAB2AKS5CZC0GFgUh7sTosxn
cAo8NZgE+RvfuON3zQ7IDdwQAAABY/b0c90AAAQDAEcwRQIhAMTtAnK+pycWcPv3
fSEbm9F2B61wF6VQIfXBYcAu5dbXAiBz5LbO0zf3Q2sgoaUeMgvLkbFb4dopUmOU
SigXNNhw5gB3AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3LAAABY/b0
d4IAAAQDAEgwRgIhAO4Z/jHFVs3C3IbVMIgRYXRAYSc+0fMW4O3QTUJZK4kYAiEA
g6/30u7MOJJCVW7UQRF0BstkH+eD7GqgvSenzkJQfMwAdgC72d+8H4pxtZOUI5eq
kntHOFeVCqtS6BqQlmQ2jh7RhQAAAWP29HiVAAAEAwBHMEUCIQCLpUlUp6Nv9rNN
xvA7iBzFOG+ojBTpCWugBU7O21Mh4QIgY7rB58bm8wgjK9Jgc7KIBRtsQgxIsj51
udQ7AvtBWuIAdwCHdb/nWXz4jEOZX73zbv9WjUdWNv9KtWDBtOr/XqCDDwAAAWP2
9IYIAAAEAwBIMEYCIQCHSQOg+capIXxdklbuNcfrFg7cE8rcQGSa92sffvWQPAIh
ALCgybabKlbig+Y8R+Hggmmtd/R/aV/FPwea1V94ZmAHAHcAb1N2rDHwMRnYmQCk
URX/dxUcEdkCwQApBo2yCJo32RMAAAFj9vSHGAAABAMASDBGAiEA84FD1hPoPGVD
rFX7GwTQbyK0uRwC/FFCYMg95KYHppACIQDkkXyLTDyj/ty2hYp7WT3OE0elibVE
KaqVlnE1jXc7ugB3AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAAB
Y/b0iB4AAAQDAEgwRgIhAOHrwZUrWZBd5E9QDPJZD0LSypxyTAYZvANafoyPADYI
AiEA3fqa5bKUpP3C0lHAQ4Ss0hOVM/OuwSGXghwZo/RSsmwAdgBep3P531bA57U2
SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAWP29I91AAAEAwBHMEUCIA6Id3li1PEI
9B8lWILtcie+CRbQMrjWkH+FdqWaHcmMAiEAqd7Rstn0THsEgcMR4FSwz+6G3WKh
gRgwU/1r0n810GcwDQYJKoZIhvcNAQELBQADggEBAAxW7BK8YOwNLkhrJbPQ7wGt
Vx76iisbcpPA5RgawqPzhyfc6tewz6giAOj9Ept88LwO46/M+kcYDguNYBluAhOk
bi7AnvkG1YkjwK2LPaicz7Mk87IG6FptbB5AiOICDXHDZMgBThHa7rp4lQc1hdJu
I9HPaxS3qoGOvbDGCWg8wA6qZexZywsC771tROMJmZKznmOS8rvXeqbS1p2TlR5V
V7oujkn1zSGMxjwA/tIDjFMa/f9yvDpi40M5eERQxxdnVYSbb8ioZwBaEoXMKH3r
lag06mHEK7JQXs1K2h+xXtSd2IGv+ioH9z3y760qjuuGpvqNCYRagLiGdILuQjU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj/HBz9gQ0/aJu/fvLhc
Uw3tHUHaNzFiVuyG1kpF6K3r9PvSloDsjSonlYXJBQB+vx4etCo4AdTd0Vn6Xp3U
Cg4sWL3NU6KLaOivu/AlSy5zlGYAeP4MsfxBvgxyiPkgKjHkOSokb4oLIiRMNt/c
o/STvPSE3Ybnm/+arLwbb+uxd06t7fwVCNwSySduPhSsTRh7WG4XQqJ3q23tpdZA
ZvWEdO1q9YcfKiPfHdcF7RxjFY2Yc/jdMCMcBCfvsMDE0xiWOEesL155pjHjEYV2
Pk4/4SmSWxIHCIHRMLXtd1805XJHM/UflHwmQM4T4Xst+qNt/fJs3tmk8aWKfRUh
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 156658306640674274650825786484618854360587880192
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hong Kong'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hong Kong'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hongkong Post'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hongkong Post e-Cert CA 1 - 15'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-13 02:28:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-13 02:28:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hong Kong'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hong Kong'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hong Kong SAR Government'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0001956070'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '000000000000000000000000DH-PDQA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hongkong Post e-Cert (Server)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DH-Professional Development and Quality Assurance'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pdqa.gov.hk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19977102019523235850282069542272038390820045301993832928684767012566587962391831101972927565513379360739429909581524328997764388836489798659554737163348943741624250619153180166976495005164571926777376078795380517462918255046757374827503082247820867599049158761255223608024631331319255162359603513452072939972752267216239968403089798083757561242636165311267231494405551844545573137289347363317408220076476882032852548402145979915214945664603433044250737852713281653798211285830495875668311825226739468503894442341221455073938842264418260147928897225061617413320593490376983100842371641691480119755652306394578851012949
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.16030.1.7.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'www.hongkongpost.gov.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'www.hongkongpost.gov.hk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pdqa.gov.hk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www1.hongkongpost.gov.hk/root/ecert_ca_1-15.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp1.hongkongpost.gov.hk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4cef77ad234ad6454828d7982cfe211a65f44a1d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl1.hongkongpost.gov.hk/crl/eCertCA1-15CRL1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							64efe8f0c65b6cb7059bf5fb798a3b7e56af800e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (850 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (846 bytes)
							034c007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000163f6f473dd0000040300473045022100c4ed0272bea7271670fbf77d211b9bd17607ad7017a55021f5c161c02ee5d6d7022073e4b6ced337f7436b20a1a51e320bcb91b15be1da295263944a281734d870e6007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000163f6f477820000040300483046022100ee19fe31c556cdc2dc86d530881161744061273ed1f316e0edd04d42592b891802210083aff7d2eecc389242556ed441117406cb641fe783ec6aa0bd27a7ce42507ccc007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000163f6f4789500000403004730450221008ba54954a7a36ff6b34dc6f03b881cc5386fa88c14e9096ba0054ecedb5321e1022063bac1e7c6e6f308232bd26073b288051b6c420c48b23e75b9d43b02fb415ae20077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000163f6f486080000040300483046022100874903a0f9c6a9217c5d9256ee35c7eb160edc13cadc40649af76b1f7ef5903c022100b0a0c9b69b2a56e283e63c47e1e08269ad77f47f695fc53f079ad55f786660070077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000163f6f487180000040300483046022100f38143d613e83c6543ac55fb1b04d06f22b4b91c02fc514260c83de4a607a690022100e4917c8b4c3ca3fedcb6858a7b593dce1347a589b54429aa959671358d773bba0077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000163f6f4881e0000040300483046022100e1ebc1952b59905de44f500cf2590f42d2ca9c724c0619bc035a7e8c8f003608022100ddfa9ae5b294a4fdc2d251c04384acd2139533f3aec12197821c19a3f452b26c0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000163f6f48f75000004030047304502200e88777962d4f108f41f255882ed7227be0916d032b8d6907f8576a59a1dc98c022100a9ded1b2d9f44c7b0481c311e054b0cfee86dd62a181183053fd6bd27f35d067
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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